Overview

overview

10

Static

static

3

5a618cbf82...3d.exe

windows7-x64

10

5a618cbf82...3d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a618cbf829772699a88cbc4b3242e33e1879033973964a38e1717efadd5493d.bin

  • Size

    1.2MB

  • Sample

    230506-1y82maaf67

  • MD5

    8124fb9307fa974bd67ce433d3b2c1c6

  • SHA1

    21443615d8c2790f5e7f8a6c7f3e02982115758a

  • SHA256

    5a618cbf829772699a88cbc4b3242e33e1879033973964a38e1717efadd5493d

  • SHA512

    683bb40c7220056d86bb100584c3dcd58b855454a83c646e2d32e43933a922839c7c55b2eefd13191e7fd95dbe37d2d530e00db9d371c83f003d18c610c2627f

  • SSDEEP

    24576:7GxKz+TDUpS+Nmj4NGQpy6X6yzjKdFuU40KUcDL0lNp/bPm:7GMOKSUDNGQp9qKqFR4JUcDLqNp/b

Score
10/10
redlineevasioninfostealerpersistencestealertrojan

Malware Config

Targets

    • Target

      5a618cbf829772699a88cbc4b3242e33e1879033973964a38e1717efadd5493d.bin

    • Size

      1.2MB

    • MD5

      8124fb9307fa974bd67ce433d3b2c1c6

    • SHA1

      21443615d8c2790f5e7f8a6c7f3e02982115758a

    • SHA256

      5a618cbf829772699a88cbc4b3242e33e1879033973964a38e1717efadd5493d

    • SHA512

      683bb40c7220056d86bb100584c3dcd58b855454a83c646e2d32e43933a922839c7c55b2eefd13191e7fd95dbe37d2d530e00db9d371c83f003d18c610c2627f

    • SSDEEP

      24576:7GxKz+TDUpS+Nmj4NGQpy6X6yzjKdFuU40KUcDL0lNp/bPm:7GMOKSUDNGQp9qKqFR4JUcDLqNp/b

    Score
    10/10
    evasionpersistencetrojanredlineinfostealerstealer

    • Detects Redline Stealer samples

      This rule detects the presence of Redline Stealer samples based on their unique strings.

      stealer

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks